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This listing of claims will replace all prior versions, and listings, of claims in the application. 
Listing of Claims: 

1 . (Cancelled) 

2. (Previously Presented) The system of claim 34, wherein the executable file 
is compiled by a compiler from a C-type programming language object model 
document. 

3. (Cancelled) 

4. (Previously Presented) The system of claim 34, wherein the instantiated 
security agent passes on each command from the commander to the object model unless such 
security agent deems such command to be of a type that should not be so passed on. 

5. (Previously Presented) The system of claim 34, wherein the security agent 
does not pass on to the object model a type of command that would expose the object 
model in a non-obfuscated form. 

6. (Previously Presented) The system of claim 34, wherein the security agent 
does not pass on to the object model a type of command that would expose the object 
model with a level of granularity finer than a pre-defined maximum. 

7. (Previously Presented) The system of claim 34, wherein the security agent 
passes on to the object model a substitute command that exposes the object model with a 
level of granularity coarser than the pre-defined maximum. 

8. (Previously Presented) The system of claim 34, wherein the loader 
instantiates the security agent separately from the object model. 
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9. (Previously Presented) The system of claim 34, wherein the loader 
instantiates the security agent as part of the object model. 

10. (Previously Presented) A method for loading a persisted object model from 
an object model document, the method comprising: 

providing a compiled executable file having an image source, a security 
source, and a loader; 

instantiating the loader in a memory of a computer upon a command from a 
commander to execute the executable file to instantiate the persisted object model; 

the loader instantiating the object model in the memory from the image source; 

the loader instantiating a security agent in the memory from the security source, 
the security agent limiting access to the object model as instantiated in the memory of the 
computer, wherein the security agent does not allow the object model to be exposed in a non- 
obfuscated form; and 

the loader returning to the commander a first reference to the instantiated security 
agent, whereby the commander in employing the first reference accesses the security agent 
rather than the instantiated object model. 

1 1 . (Original) The method of claim 10 further comprising the loader upon 
instantiating the security agent providing same with a second reference to the instantiated 
object model, whereby the commander does not have the second reference and therefore 
cannot directly access the object model or command same to act. 

12. (Original) The method of claim 10 further comprising the instantiated security 
agent passing on each command from the commander to the object model unless such 
security agent deems such command to be of a type that should not be so passed on. 
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13. (Original) The method of claim 12 comprising the security agent not passing 
on to the object model a type of command that would expose the object model in a non- 
obfuscated form. 

14. (Original) The method of claim 12 comprising the security agent not passing 
on to the object model a type of command that would expose the object model with a level of 
granularity finer than a pre-defined maximum. 

15. (Original) The method of claim 14 comprising the security agent passing on to the 
object model a substitute command that exposes the object model with a level of granularity 
coarser than the pre-defined maximum. 

16. (Original) The method of claim 10 comprising the loader instantiating the 
security agent separately from the object model. 

17. (Original) The method of claim 10 comprising the loader instantiating the 
security agent as part of the object model. 

18. (Previously Presented) A computer-readable storage medium having stored 
thereon instructions, which when executed, instantiate a loader for an object model document 
for persisting an object model therein and enable a commander to indirectly access the object 
model, the object model document comprising a compiled executable file having an 
executable image source file, an executable security source, and an executable loader, the 
instructions comprising: 

instantiating a loader in memory of a computer using the executable loader, 
the loader instantiating in the memory of the computer: 

(a) the persisted object model in the memory of the computer using the 
executable image source and 
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(b) a security agent in the memory of the computer using the executable security 
source, wherein the security agent limits access to the object model as instantiated in the 
memory of the computer such that the security agent does not allow the object model to be 
exposed in a non-obfuscated form; and wherein the instructions return to the commander a first 
reference to the instantiated security agent, whereby the commander in employing the first 
reference accesses the security agent rather than the instantiated object model. 

19. (Original) The medium of claim 18 wherein the executable file is 
compiled by a compiler from a C-type programming language object model 
document. 

20. (Original) The medium of claim 1 8 wherein the loader upon instantiating the 
security agent provides same with a second reference to the instantiated object model, 
whereby the commander does not have the second reference and therefore cannot directly 
access the object model or command same to act. 

21. (Original) The medium of claim 18 wherein the instantiated security agent 
passes on each command from the commander to the object model unless such security 
such security agent deems such command to be of a type that should not be so passed on. 

22. (Original) The medium of claim 21 wherein the security agent does not pass 
on to the object model a type of command that would expose the object model in a non- 
obfuscated form. 

23. (Original) The medium of claim 21 wherein the security agent does not pass 
on to the object model a type of command that would expose the object model with a level of 
granularity finer than a pre-defined maximum. 

24. (Original) The medium of claim 23 wherein the security agent passes on to the 
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object model a substitute command that exposes the object model with a level of granularity 
coarser than the pre-defined maximum. 

25. (Original) The medium of claim 18 wherein the loader instantiates the 
security agent separately from the object model. 

26. (Original) The medium of claim 1 8 wherein the loader instantiates the security 
agent as part of the object model. 

27-33. (Cancelled) 

34. (Previously Presented) A computer system comprising: 

an input device that receives a command input from a user to display information 
from an object model via a software application having an application commander; 

a compiled executable file having an executable image file source, an executable 
security source, and an executable loader, 

wherein upon a command from the commander to execute the executable file, a 
loader is instantiated in a memory of the computer using the executable loader, the loader 
instantiating in the memory of the computer (a) an object model using the executable image 
source, and (b) a security agent using the security source, the security agent controlling 
access to the object model as instantiated in the memory of the computer, and wherein the 
loader provides a first reference for the instantiated security agent to point to the object 
model and a second reference for the application commander to point to the instantiated 
security agent, and wherein, in response to an application request for information from the 
object model: 

(i) the application commander accesses the security agent rather than the object 
model, and 

(ii) the security agent limits access to the object model before accessing the 

Page 6 of 17 



DOCKET NO.: MSFT-2555/304784.01 PATENT 

Application No.: 10/656,384 

Office Action Dated: November 26, 2008 

requested information from the object model using the second reference; and 

a computer monitor that displays the requested information, wherein the requested 
information from the object model is provided by the security agent to the application 
commander if the request for information does not act to expose the object model in a non- 
obfuscated form. 
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